VYPR
← All advisories
High severity8.8OSV Advisory· Published Dec 14, 2017· Updated Jun 17, 2026

CVE-2017-17524

CVE-2017-17524

Description

library/www_browser.pl in SWI-Prolog 7.2.3 does not validate strings before launching the program specified by the BROWSER environment variable, which might allow remote attackers to conduct argument-injection attacks via a crafted URL.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • Swi Prolog/Swipl DevelOSV
    Range: V5.10.0, V5.10.1, V5.10.2, …
  • Swi Prolog/Swi Prolog2 versions
    cpe:2.3:a:swi-prolog:swi-prolog:7.2.3:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:swi-prolog:swi-prolog:7.2.3:*:*:*:*:*:*:*
    • (no CPE)range: <7.2.3

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.